IN THE CLAIMS 
Claims 1-65: Canceled 

66. (Currently Amended) A method for receiving e-mails, the method comprising: 
receiving a plurality of e-mails, including a first e-mail and a second e - mail ; 
for at least the first e-mail, performing steps comprising: 

separating a first e-mail header from a first e-mail message body; 

storing said first e-mail message body in a first e-mail message body field; 

separating information contained in said first e-mail header into a plurality 
of first e-mail header information items; 

storing information corresponding to said plurality of first e-mail header 
information items in -with a plurality of corresponding header information fields; 

creating a link between (i) information provided with at least eae -a first of 
said plurality of first e-mail header information fields, (ii) information provided 
with at least a second of said plurality of first e-mail header information fields^T 
and (iii) the first e-mail message body stored in a first e-mail message body field; 
and 

storing linking information sufficient to identify said link between said 

information at least ono information provided with said first of said plurality of 
first e-mail header information fiet dfields . information provided with said-at least 
fifst -said second of said plurality of first e-mail second header information field 
fields, and at least a portion of the first e-mail message body; field; 

wherein the plurality of header information fields include at least all of the 
fields in a group consisting of a recipient field, a sender field, and a copied 
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wherein the method further includes performing, for at least the second e-mail, steps 
comprising: 

separating a second e-mail header from a second e-mail message body; 

separating information contained in said second e-mail header into a plurality of 
second e-mail header information items; 

comparing information provided with at least one of the plurality of second e-mail 
header information items with information stored with a plurality of header information 
fields of one or more other e-mails that have previously been received, including 
information stored with at least one of said first of or said second of the plurality of first 
e-mail header information fields; and 

if the compared information matches information stored with one of said first of 
or said second of the plurality of first e-mail header information fields, linking the 
second e-mail message body with the matching information stored with one of said first 
of or said second of the plurality of first e-mail header information fields . 

67. (Previously Presented) The method of claim 66 wherein said at least first e-mail 
header information field, said at least first e-mail second header information fields, and 
said linking information are provided in one or more tables. 

68. (Canceled) 

69. (Cancel) 

70. (New) The method of claim 66, wherein the first e-mail message body and the 
second e-mail message body include one or more attachments. 
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71 . (New) The method of claim 66, wherein all of the fields of the group also include 
a message subject field. 

72. (New) The method of claim 66, 

wherein the method includes storing information corresponding to at least some 
of said plurality of second e-mail header information items with the plurality of 
corresponding header information fields; 

wherein receiving a plurality of e-mails includes receiving a third e-mail, and 
wherein the method fiirther comprises performing, for the third e-mail, steps 
comprising: 

separating a third e-mail header from a third e-mail message body; 

separating the information contained in said third e-mail header into a plurality of 
third e-mail header information items; 

comparing information provided with at least one of the plurality of third e-mail 
header information items with information stored with a plurality of header information 
fields of one or more other e-mails that have previously been received, including 
information stored with at least one of said first of or said second of the plurality of the 
first e-mail header information fields; and 

determining that the compared information does not match information stored 
with at least one of said first of or said second of the plurality of first e-mail header 
information fields; and 

identifying the third e-mail as spam, wherein identifying the third e-mail as spam 
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is performed based at least in part on determining that the compared information does not 
match information stored with at least one of said first of or said second of the plurality 
of first e-mail header information field. 

73. (New) A method for receiving e-mails, the method comprising: 

receiving a plurality of e-mails, including a first e-mail and a second e-mail; 
for at least the first e-mail, performing steps comprising: 

separating a first e-mail header from a first e-mail message body; 

storing said first e-mail message body in a first e-mail message body field; 

separating information contained in said first e-mail header into a plurality 
of first e-mail header information items; 

storing information corresponding to said plurality of first e-mail header 
information items with a plurality of corresponding header information fields; 

creating a link between (i) information provided with at least a first of said 
plurality of first e-mail header information fields, (ii) information provided with at 
least a second of said plurality of first e-mail header information fields; and (iii) 
the first e-mail message body stored in a first e-mail message body field; and 

storing linking information sufficient to identify said link between said 
information provided with said first of said plurality of first e-mail header 
information fields, information provided with at least said second of said plurality 
of first e-mail header information fields, and at least a portion of the first e-mail 
message body; wherein the plurality of header information fields include at least 
all of the fields in a group consisting of a recipient field, a sender field, and a 
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copied recipient field; 

wherein the method further includes performing, for at least the second e-mail, 
steps comprising: 

separating a second e-mail header from a second e-mail message body; 

storing said second e-mail message body in a second e-mail message body field; 

separating the information contained in said second e-mail header into a plurality 
of second e-mail header information items; 

comparing at least one of (i) information contained with at least one of the 
plurality of second e-mail header information items with information stored with a 
plurality of header information fields of one or more other e-mails that have previously 
been received, including information stored with at least one of said first of or said 
second of the plurality of first e-mail header information fields, or (ii) at least a portion of 
the second e-mail message body with at least a portion of the first e-mail message body; 
and 

responsive to the compared information matching information stored with one of 
said first of or said second of the plurality of first e-mail header information fields, 
linking the second e-mail message body with the matching information stored with one 
of said first of or said second of the plurality of first e-mail header information fields;. 

responsive to the at least portion of the second e-mail message body matching 
with at least the portion of the at least portion of the first e-mail message body, linking 
the second e-mail message body with one of said first of or said second of the plurality of 
first e-mail header information fields. 
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74. (New) The method of claim 73, wherein the first e-mail message body and the 
second e-mail message body include one or more attachments. 

75. (New) The method of claim 73, wherein all of the fields of the group also include 
a message subject field. 

76. (New) The method of claim 73, 

wherein the method includes storing information corresponding to at least some 
of said plurality of second e-mail header information items with the plurality of 
corresponding header information fields; 

wherein receiving a plurality of e-mails includes receiving a third e-mail, and 
wherein the method further comprises performing, for the third e-mail, steps 
comprising: 

separating a third e-mail header from a third e-mail message body; 

separating the information contained in said third e-mail header into a plurality of 
third e-mail header information items; 

comparing information provided with at least one of the plurality of third e-mail 
header information items with information stored with a plurality of header information 
fields of one or more other e-mails that have previously been received, including 
information stored with at least one of said first of or said second of the plurality of first 
e-mail header information fields; and 

determining that the compared information does not match information stored 
with at least one of said first of or said second of the plurality of first e-mail header 
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information fields; and 

identifying the third e-mail as spam, wherein identifying the third e-mail as spam 
is performed based at least in part on determining that the compared information does not 
match information stored with at least one of said first of or said second of the pluralify 
of first e-mail header information field. 
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